support setting the session lifetime in config.yaml